CanisterWorm exploits npm accounts at scale
A coordinated supply chain attack targeting the Node Package Manager ecosystem has exposed a new level of automation and persistence, with threat actors hijacking trusted publisher accounts to distribute malicious code across widely used software libraries. Security researchers tracking the campaign, known as “CanisterWorm,” say it relies on stolen access tokens and compromised namespaces to infiltrate development pipelines without immediate detection. The campaign has been linked to […]